PT-2026-102962

A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affected by this issue is the function app user login model.php::cekUserLogin of the file application/models/app user login model.php of the component KCFinder File Manager. Such...

PT-2026-91766

A weakness has been identified in PHPGurukul Blood Donor Management System 1.0. Affected by this issue is some unknown functionality of the file application/models/admin/Login Model.php. This manipulation of the argument password/email/currentpassword/dbcurrentpwd/newpassword causes cleartext...

CVE-2026-15663: Improper Neutralization of Special Elements used in an SQL Command

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to generic SQL Injection via Import File 'settings' Key in all versions up to, and including, 3.14.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on...

CVE-2026-3292 jizhiCMS Batch Model.php findAll sql injection

A security vulnerability has been detected in jizhiCMS up to 2.5.6. Affected is the function findAll in the library frphp/lib/Model.php of the component Batch Interface. The manipulation of the argument data leads to sql injection. The attack is possible to be carried out remotely. The exploit ha...

CVE-2026-3292: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in jizhiCMS up to 2.5.6. Affected is the function findAll in the library frphp/lib/Model.php of the component Batch Interface. The manipulation of the argument data leads to sql injection. The attack is possible to be carried out remotely. The exploit ha...

CVE-2026-1884: Server-Side Request Forgery (SSRF)

A weakness has been identified in ZenTao up to 21.7.6-85642. The impacted element is the function fetchHook of the file module/webhook/model.php of the component Webhook Module. This manipulation causes server-side request forgery. The attack may be initiated remotely. The exploit has been made...

CVE-2025-13789: Server-Side Request Forgery (SSRF)

A vulnerability was found in ZenTao up to 21.7.6-8564. This affects the function makeRequest of the file module/ai/model.php. The manipulation of the argument Base results in server-side request forgery. The attack can be launched remotely. The exploit has been made public and could be used...

EUVD-2009-1876

Malware in sbrugna...

CVE-2009-1880

Cross-site scripting XSS vulnerability in MT312 REP-BBS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 model.php and 2 config.php with timestamps before 20090521...

PT-2024-33060

Name of the Vulnerable Software and Affected Versions Wavelog version 1.8.5 Description The issue is related to an SQL injection vulnerability in the Oqrs model.php file, specifically through the station id parameter in the get worked modes function. This vulnerability allows for SQL injection...

PT-2024-38231

Name of the Vulnerable Software and Affected Versions SourceCodester Lot Reservation Management System version 1.0 Description A critical issue was found in the SourceCodester Lot Reservation Management System, affecting an unknown functionality of the file /admin/manage model.php. The manipulati...

PT-2024-38183 · Sourcecodester · Sourcecodester Lot Reservation Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Lot Reservation Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /view model.php. The manipulation of the id argument leads to SQL injectio...

CVE-2024-24216

Zentao v18.0 to v18.10 was discovered to contain a remote code execution RCE vulnerability via the checkConnection method of /app/zentao/module/repo/model.php...

CVE-2024-24216

Zentao v18.0 to v18.10 was discovered to contain a remote code execution RCE vulnerability via the checkConnection method of /app/zentao/module/repo/model.php...

CVE-2024-24216: Improper Neutralization of Special Elements used in a Command

Zentao v18.0 to v18.10 was discovered to contain a remote code execution RCE vulnerability via the checkConnection method of /app/zentao/module/repo/model.php...

PT-2023-11736

Name of the Vulnerable Software and Affected Versions Daylight Studio FUEL-CMS version 1.4.9 Description The issue allows remote attackers to execute arbitrary code via the col parameter to the list items function in the Base module model.php file. This enables attackers to inject SQL code,...

PT-2023-18821

Name of the Vulnerable Software and Affected Versions Kalkun version 0.8.0 Description The issue is related to a Cross Site Scripting XSS vulnerability. It occurs via the username input in the file User model.php. Recommendations For Kalkun version 0.8.0, update the User model.php file to properl...

CVE-2015-10050 brandonfire miRNA_Database_by_PHP_MySql model.php count_rna sql injection

A vulnerability was found in brandonfire miRNADatabasebyPHPMySql. It has been declared as critical. This vulnerability affects the function construct/selectsinglerna/countrna of the file inc/model.php. The manipulation leads to sql injection. The patch is identified as...

CVE-2015-10050

A vulnerability was found in brandonfire miRNADatabasebyPHPMySql. It has been declared as critical. This vulnerability affects the function construct/selectsinglerna/countrna of the file inc/model.php. The manipulation leads to sql injection. The patch is identified as...

CVE-2015-10050: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in brandonfire miRNADatabasebyPHPMySql. It has been declared as critical. This vulnerability affects the function construct/selectsinglerna/countrna of the file inc/model.php. The manipulation leads to sql injection. The patch is identified as...